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Description 

SEMICONDUCTOR INTEGRATED CIRCUIT APPARATUS AND ELECTRONIC 

SYSTEM 

Technical Field 
[0001] 

The present invention relates to a data protection 
technology in a nonvolatile semiconductor memory and, 
particularly, to a technology effectively applied to 
prevention of copying and rewriting of a program in a 
semiconductor integrated circuit apparatus having the 
internal nonvolatile semiconductor memory therein. 

Background Art 
[0002] 

In recent years, for the purposes of accelerating 
developments and improvements of electronic appliances, there 
has been an increasing demand for a semiconductor integrated 
circuit apparatus having an integrated nonvolatile 
semiconductor memory therein, i.e. a microcomputer with a 
built-in flash memory, in which a control program and control 
data are easily rewritten. 
[0003] 

Some of such microcomputers with built-in flash memory 



I * 

have a protect function for prohibiting rewriting of an 
application program and the like stored in the flash memory 
for the purpose of security protection. 
[0004] 

As the protection function for data and program stored 
in the nonvolatile semiconductor memory, there has been 
proposed a technology wherein a programmer stores a program 
in a protection block set by the programmer in EPROM (Erasable 
Programmable Read Only Memory) and then sets a specified bit 
of a protection register in the EPROM to prohibit 
reading/writing from outside the protection area (see Patent 
Literature 1, for example). 

Patent Literature 1: JP-A-2000-76133 

Disclosure of the Invention 

Problems that the Invention is to Solve 

[0005] 

The inventor of this invention has found that the protect 
technologies in microcomputer with built-in flash memory have 
the following problems. 
[0006] 

In the case where a protect function of a flash memory 
is enabled, it is advantageous that programs and the like cannot 
be read by a third person, but, due to the protection on a memory 
block (block) of the flash memory, user data cannot be updated. 
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[0007] 

Also, since it is possible to easily rewrite an 
application program by starting a boot mode with the flash 
memory being mounted on a printed circuit board of an electronic 
system, there is a risk of reading/rewriting of the application 
program by third party, 
[0008] 

Further, even when the flash memory is protected, there 
is a risk that contents of an application program can be guessed 
when contents of a RAM (Random Access Memory) which is used 
as a work area of a CPU provided in a microcomputer are read 
out and instructions are analyzed. 
[0009] 

An object of this invention is to provide a technology 
for preventing without fail illegal copying or alteration of 
a program by a third party by prohibiting reading in a specific 
memory block of a nonvolatile semiconductor memory. 
[0010] 

The above and other objects and novel characteristics 
of this invention will become apparent from the following 
description and accompanying drawings. 

Means for Solving the Problems 
[0011] 

Summary of a representative one of invention disclosed 
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in this patent application is as follows. 
[0012] 

This invention provides a semiconductor integrated 
circuit apparatus comprising: a nonvolatile storage provided 
with a memory array unit having a plurality of nonvolatile 
memory cells and a control unit for controlling write operation 
of storing information in the nonvolatile memory cells, read 
operation of reading out the information stored in the 
nonvolatile memory cells, and erase operation of erasing the 
information stored in the nonvolatile memory cells; a volatile 
storage to be used as a work area of a program stored in the 
nonvolatile storage; a central processing unit capable of 
executing a predetermined processing and giving instructions 
to the nonvolatile storage; and a protect operation control 
unit for controlling the nonvolatile storage and the read 
operation of the nonvolatile storage, wherein the memory array 
unit has a first protect memory area in which reading and 
writing of information stored are prohibited under the control 
of the protect operation control unit; the volatile storage 
has a second protect memory area in which reading from an area 
other than the first protect memory area of the memory array 
unit is prohibited under the control of the protect operation 
control unit; and the second protect memory area of the volatile 
storage is used as a work area of a program stored in the first 
protect memory area of the nonvolatile storage. 
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[0013] 

Also, this invention provides a semiconductor 
integrated circuit apparatus comprising a nonvolatile storage 
provided with a memory array unit having a plurality of 
nonvolatile memory cells and a control unit for controlling 
write operation of storing information in the nonvolatile 
memory cells , read operation of reading out the information 
stored in the nonvolatile memory cells , and erase operation 
of erasing the information stored in the nonvolatile memory 
cells; a volatile storage; a central processing unit capable 
of executing a predetermined processing and giving 
instructions to the nonvolatile storage; and a protect 
operation control unit for controlling the nonvolatile storage 
and the read operation of the nonvolatile storage , wherein the 
memory array unit has a first protect memory area in which 
reading and writing of information stored are prohibited under 
the control of the protect operation control unit; and the 
volatile storage has a second protect memory area in which 
reading and writing from an area other than the first protect 
memory area of the memory array unit are prohibited under the 
control of the protect operation control unit. 
[0014] 

A summary of this invention will be described briefly 

below. 
[0015] 
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This invention provides an electronic system including 
a semiconductor integrated circuit apparatus comprising: a 
nonvolatile semiconductor storage apparatus provided with a 
nonvolatile storage provided with a memory array unit having 
a plurality of nonvolatile memory cells and a control unit for 
controlling write operation of storing information in the 
nonvolatile memory cells,- read operation of reading out the 
information stored in the nonvolatile memory cells , and erase 
operation of erasing the information stored in the nonvolatile 
memory cells; a volatile semiconductor storage apparatus to 
be used as a work area of a program stored in the nonvolatile 
semiconductor storage apparatus; a semiconductor integrated 
circuit apparatus provided with a central processing unit 
capable of executing a predetermined processing and giving 
instructions to the nonvolatile semiconductor storage 
apparatus a protect operation control unit for controlling the 
nonvolatile semiconductor storage apparatus and the read 
operation of the nonvolatile semiconductor storage apparatus, 
wherein the memory array unit has a first protect memory area 
in which reading of information stored is prohibited under the 
control of the protect operation control unit; the volatile 
semiconductor storage apparatus has a second protect memory 
area in which reading from an area other than the first protect 
memory area of the memory array unit is prohibited under the 
control of the protect operation control unit; and the second 
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protect memory area is used as a work area of a program stored 
in the nonvolatile semiconductor storage apparatus. 

Advantage of the Invention 
[0016] 

Brief description of effects to be obtained by the 
representative one of invention disclosed in this patent 
application is as follows. 
[0017] 

( 1 ) Prevention of illegal copying or alteration of a 
program and improvements in security thanks to restriction on 
reading/rewriting in a first protect memory block. 

[0018] 

(2) More effective prevention of illegal copying or 
alteration of a program thanks to a restriction on reading in 
a second protect memory block which makes it difficult to guess 
the program. 

[0019] 

(3) Significant improvement in reliability of a 
semiconductor integrated circuit apparatus and an electronic 
system using the semiconductor integrated circuit apparatus 
owing to the above items ( 1 ) and ( 2 ) . 

Brief Description of the Drawings 
[0020] 
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[Fig. 1] A block diagram showing a semiconductor 
integrated circuit apparatus according to a first embodiment 
of this invention. 

[Fig. 2] A diagram for illustrating one example of a 
memory map in a flash memory provided in the semiconductor 
integrated circuit apparatus of Fig. 1. 

[Fig. 3] A diagram for illustrating one example of a 
memory map in a RAM provided in the semiconductor integrated 
circuit apparatus of Fig. 1. 

[Fig. 4 ] A diagram for illustrating a part of one example 
of constitution of a bus state controller provided in the 
semiconductor integrated circuit apparatus of Fig. 1. 

[Fig. 5] A block diagram showing an erasure prohibition 
control circuit and rewrite prohibition control circuit 
provided in the semiconductor integrated circuit apparatus of 
Fig. 1. 

[Fig. 6] A timing chart showing one example of reading 
control operation in a user access area of the flash memory 
provided in the semiconductor integrated circuit apparatus of 
Fig. 1. 

[Fig. 7] A timing chart showing one example of control 
operation in the case of reading out a protect area from the 
user access area of the flash memory provided in the 
semiconductor integrated circuit apparatus of Fig. 1. 

[Fig. 8] A timing chart showing one example of control 
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operation in the case of reading out a protect area from a 
protect area of the flash memory provided in the semiconductor 
integrated circuit apparatus of Fig. 1. 

[Fig- 9] A timing chart showing one example of control 
operation in the case of reading out data of a protect area 
of the RAM from the protect area of the flash memory provided 
in the semiconductor integrated circuit apparatus of Fig. 1. 

[Fig. 10] A diagram for illustrating one example of 
processing of the RAM provided in the semiconductor integrated 
circuit apparatus of Fig. 1. 

[ Fig . 1 1 ] A flowchart showing one example of first user ' s 
setting up of a key code in the semiconductor integrated circuit 
apparatus of Fig. 1. 

[Fig. 12] A flowchart showing one example of end user's 
setting up of a key code in the semiconductor integrated circuit 
apparatus of Fig. 1. 

[Fig. 13] A block diagram showing a semiconductor 
integrated circuit apparatus according to a second embodiment 
of this invention. 

[Fig. 14] A diagram for illustrating a reset sequence 
in the semiconductor integrated circuit apparatus of Fig. 13. 

[Fig. 15] A flow chart showing a setting processing in 
a protect processing control unit in the reset sequence of Fig. 
14. 

[Fig. 16] A flowchart showing an arbitrary setting 
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processing in a protect area in a flash memory provided in the 
semiconductor integrated circuit apparatus of Fig. 13. 

[Fig. 17] A diagram for supplementary illustrating a 
memory map of the flash memory in Fig. 16. 

Best Mode for Carrying out the Invention 
[0021] 

Hereinafter, embodiments of this invention will be 
described in detail base on the drawings. Note that identical 
components are denoted by the same reference symbol as a general 
rule to omit repetitive description for such identical 
components . 
[0022] 

(First Embodiment) 

Fig. 1 is a block diagram showing a semiconductor 
integrated circuit apparatus according to a first embodiment 
of this invention; Fig. 2 is a diagram for illustrating one 
example of a memory map in a flash memory provided in the 
semiconductor integrated circuit apparatus of Fig. 1; Fig. 3 
is a diagram for illustrating one example of a memory map in 
a RAM provided in the semiconductor integrated circuit 
apparatus of Fig. 1; Fig. 4 is a diagram for illustrating a 
part of one example of constitution of a bus state controller 
provided in the semiconductor integrated circuit apparatus of 
Fig. 1; Fig. 5 is a block diagram showing an erasure prohibition 



10 



control circuit and rewrite prohibition control circuit in the 
flash memory provided in the semiconductor integrated circuit 
apparatus of Fig. 1 ; Fig. 6 is a timing chart showing one example 
of reading control operation in a user access area of the flash 
memory provided in the semiconductor integrated circuit 
apparatus of Fig. 1 ; Fig. 7 is a timing chart showing one example 
of control operation in the case of reading out a protect area 
from the user access area of the flash memory provided in the 
semiconductor integrated circuit apparatus of Fig. 1; Fig. 8 
is a timing chart showing one example of control operation in 
the case of reading out a protect area from a protect area of 
the flash memory provided in the semiconductor integrated 
circuit apparatus of Fig. 1; Fig. 9 is a timing chart showing 
one example of control operation in the case of reading out 
data of a protect area of the RAM from the protect area of the 
flash memory provided in the semiconductor integrated circuit 
apparatus of Fig. 1; Fig. 10 is a diagram for illustrating one 
example of processing of the RAM provided in the semiconductor 
integrated circuit apparatus of Fig. 1; Fig. 11 is a flowchart 
showing one example of first user's setting up of a key code 
in the semiconductor integrated circuit apparatus of Fig. 1; 
and Fig. 12 is a flowchart showing one example of end user's 
setting up of a key code in the semiconductor integrated circuit 
apparatus of Fig. 1. 
[0023] 
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In the first embodiment, a semiconductor integrated 
circuit apparatus 1 is provided with a CPU (Central Processing 
Unit) 2, a bus state controller (protect operation control 
unit) 3, a RAM (volatile storage) 4, peripheral circuits 6 
including an SCI (Serial Communication Interface) 5, etc., a 
nonvolatile semiconductor memory such as a flash memory 7 , and 
the like as shown in Fig. 1. 
[0024] 

The CPU 2 reads out an instruction stored in the flash 
memory (nonvolatile storage) 7 to perform a predetermined 
processing. The bus state controller 3 controls transmission 
of signals in an internal bus B including an address bus and 
a data bus and controls a state of the internal bus B. The 
RAM (volatile storage) 4 is a readable/writable memory and used 
as a work area of the CPU 2 . 
[0025] 

The SCI 5 is an interface which performs serial 
communication with a device externally connected thereto . The 
peripheral circuit 6 is provided with a timer, a WDT (Watch 
Dog Timer), a TPU (Timer Pulse Unit), an A/D (Analog/Digital) 
converter, and a D/A (Digital /Analog) converter, and the like 
in addition to the above components. 
[0026] 

The timer is based on an 8-bit counter, for example. The 
WDT monitors whether or not there is a runway of the 
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semiconductor integrated circuit apparatus 1. The TPU is 
capable of outputting a PWM (Pulse Width Modulation) waveform. 
The A/D converter converts an analog signal into a digital 
signal to output the digital signal. The D/A converter 
converts a digital signal into an analog signal to output the 
analog signal. 
[0027] 

The flash memory 7 is a nonvolatile semiconductor memory 
capable of electrically rewriting/erasing data and stores a 
control program including a program instruction to be executed 
by the CPU 2 and the like. The flash memory 7 performs data 
writing/reading, data erasure, and the like in response to 
instructions from the CPU 2 . 
[0028] 

The peripheral circuit 6 including the CPU 2, the bus 
state controller 3, the RAM 4, the SCI 5, and so forth and the 
flash memory 7 are connected to each other by the internal bus 
B. 

[0029] 

The connection is so established that a value of a program 
counter indicating an address to be read out next, a write 
signal for permitting writing, and a read signal for permitting 
reading are input from the CPU 2 to the bus state controller 
3. 

[0030] 
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Also, the connection is so established that a RAM select 
signal SI, a write signal, and a read signal output from the 
bus state controller 3 are input to the RAM 4 . The RAM select 
signal SI is used for selecting the RAM 4. The write signal 
is used for permitting writing in the RAM 4, and the read signal 
is a signal used for permitting reading in the RAM 4. 
[0031] 

Also, the connection is so established that a serial 
select signal, a write signal, and a read signal are input to 
the SCI 5. The serial select signal is used for selecting the 
SCI 5. The write signal is used for permitting writing in the 
SCI 5, and the read signal is a signal used for permitting 
reading in the SCI 5. 
[0032] 

Also, the connection is so established that a flash 
memory select signal, a write signal, and a read signal are 
input to the flash memory 7. The flash memory select signal 
is used for selecting the flash memory 7. The write signal 
is used for permitting writing in the flash memory 7, and the 
read signal is a signal used for permitting reading in the flash 
memory 7 . 
[0033] 

The flash memory 7 has a memory mat (memory array unit) 
7a and a control circuit (control unit) 7b. 
[0034] 
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The memory mat 7a has memory cells, each of which is a 
smallest unit for storage, aligned in an array form and includes 
peripheral circuit such as an address buffer, a column decoder, 
a row decoder, and sensing amplifier. The control circuit 7b 
temporarily stores various control signals input from the CPU 
2 to control operation logic. 
[0035] 

Fig. 2 is diagram for illustrating one example of the 
memory map in the memory mat 7a of the flash memory 7. 
[0036] 

As shown in Fig. 2, the memory mat 7a has a user access 
area UA, and a protect area (first protect memory block) PA. 
The user access area UA has plural blocks to which a user can 
access . The protect area PA is a block in which programs and 
data are stored, and reading out of the programs and data is 
restricted. The protect area PA is not limited to one block 
of consecutive addresses and can be disposed in plural blocks. 
[0037] 

Fig. 3 is a diagram for illustrating one example of the 
memory map in the RAM 4 . 
[0038] 

The memory map has a user access area UAl and a protect 
area (second protect memory block) PA1 in the RAM 4, too. The 
user access area UA 1 is used for unfolding data of the flash 
memory 7 or the like, and the protect area PA 1 is a block used 
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as a work area of the program stored in the protect area PA 
(first protect memory block) of the flash memory 7. 
[0039] 

It is possible to read out the programs and data stored 
in the protect area PA of the memory mat 7a by the use of a 
program in the protect area PA, but reading out from the program 
stored in the user access area UA of the memory mat 7a , the 
user access area UAl of the RAM 4, and the protect area PA1 
is impossible. 
[0040] 

It is possible to read out the data stored in the protect 
area PAl of the RAM 4 from the protect area PA of the memory 
mat 7a , but reading out from areas other than the protect area 
PA (i.e. the user access area UA of the memory mat 7a, the user 
access area UA of the RAM 4, and the protect area PAl of the 
RAM 4) is impossible. 
[0041] 

Further, it is possible to rewrite/erase programs and 
data in the protect area PA of the flash memory 7 from the user 
access area UAl of the RAM 4 until a predetermined key code 
is set in the key code area KA (Fig. 5) which will be described 
later in this specification. Until the setting of the 
predetermined key code, it is possible to gain access to the 
protect area PA, the user access area UA, and the user access 
area UAl of the flash memory 7 from each of these areas. 
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[0042] 

In the case where the key code is set, it is impossible 
to rewrite/erase the protect area PA of the flash memory 7. 
[0043] 

Though it is possible to rewrite/erase the data and the 
like stored in the protect area PAl of the RAM 4 from the protect 
area PA of the flash memory 7 , it is impossible to perform 
rewrite/erasure from areas other than the protect area PA (i.e. 
from the user access area UA of the flash memory 7 , the user 
access area UAl of the RAM 4 , and the protect area PAl ) . 
Further, irrespective of the presence of the key code, 
rewrite/erasure from areas other than the protect area PA of 
the flash memory 7 is prohibited due to the control by the 
protect operation control unit. 
[0044] 

In the case of reading out a program or data from the 
protect area PA in the flash memory 7 in which readout is 
prohibited, data of H'FF, for example, is invariably read out. 
[0045] 

Though the data to be read out is referred to as H'FF 
in accordance with the data of initial value written in the 
flash memory 7 in this specification, the data to be read out 
may be any data other than data in a high impedance state (Hi-Z ) , 
such as senseless data including H ' 00 and a last value maintain, 
and an arbitrary value set by a user. 
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[0046] 

In the case of reading out a program or data of the protect 
area PAl in RAM 4 in which read out is prohibited, data of H' 00, 
for example, is invariably read out. 
[0047] 

Though the data to be read out is referred to as H'OO 
in accordance with an NOP instruction of the RAM 4 in this 
specification, the data to be read out may be any of those other 
than data in a high impedance state (Hi-Z), such as senseless 
data including as H'FF and a last value maintain and an 
arbitrary value set by a user. 
[0048] 

Fig. 4 is a diagram for illustrating a part of one example 
of constitution of the bus state controller 3. 
[0049] 

The bus state controller 3 has selectors 8 to 11, NOR 
circuits 12 and 13, drivers 14 and 15, and the like as shown 
in Fig. 4. 
[0050] 

An address signal is input to one of input units of each 
of the selectors 8 to 11 from the CPU 2 (Fig. 1) , and a program 
counter value (PC value) output from the CPU 2 is input to the 
other one of input units of each of the selectors 8 to 11. 
[0051] 

The selector 8 outputs ' 0 ' (Lo level signal) which brings 
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the flash memory select signal active in the case where the 
address signal is an address H f 00_0000 to H'OOFFFF or an 
address H , 02_0000 to H , 03_FFFF / or an address H'01_0000 to 
H'01_FFFF indicating the protect area PA (Fig. 2) of the flash 
memory 7 and a value of the program counter is H f 01 0000 to 
01_FFFF. In other cases, the selector 8 outputs •1' (Hi level 
signal) which brings the flash memory select signal inactive. 
That is, it is possible to gain access irrespective of the 
program counter value in the case where the address value output 
from the CPU 2 indicates the user access area UA of the flash 
memory 7. Further, in the case where the address value 
indicates the protect area PA of the flash memory 7 and the 
value of the program counter indicates the protect area PA of 
the flash memory 7, too, the flash memory 7 is in an accessible 
state, i.e., the select signal is in the active state. 
[0052] 

The selector 9 outputs 1 0 1 (Lo level signal) which brings 
the RAM memory select signal active in the case where the 
address signal is an address H , FF_D800 to H ■ FF_EFFF which 
indicates the user access area UA1 (Fig. 3) of the RAM 4 or 
an address H , FF_D000 to H 1 FF_D7FF which indicates the protect 
area PA1 (Fig. 3 ) of the RAM 4 and a value of the program counter 
is H'OIOOOO to 01FFFF (address indicating the protect area 
PA of the flash memory 7). In other cases, the selector 9 
outputs 1 1 1 (Hi level signal) which brings the RAM select signal 
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inactive. That is, it is possible to gain access irrespective 
of the program counter value in the case where the address value 
output from the CPU 2 indicates the user access area UA1 of 
the RAM 4 . Further, in the case where the value of the program 
counter indicates the protect area PA of the flash memory 7 
and the address value indicates the protect area PAl of the 
RAM 4, the RAM 4 is in an accessible state. 
[0053] 

The selector 10 outputs ' 0 • in the case where the address 
signal is an address H'01_0000 to H'01_FFFF indicating the 
protect area PA (Fig. 2) of the flash memory 7 and the value 
of the program counter is a value other than H'01_0000 to 
01_FFFF. The selector 10 outputs • 1" when the address signal 
is the address H'01_0000 to H'01_FFFF and the program counter 
value is H'01_0000 to 01_FFFF. 
[0054] 

The selector 11 outputs 1 0 1 in the case where the address 
signal is the address H , FF_D000 to H'FF_D7FF which indicates 
the protect area PAl of the RAM 4 and the value of the program 
counter is a value other than H'01_0000 to 01JFFFF. The 
selector 11 outputs • 1 1 when the address signal is the address 
H'FF_D000 to H'FF_D7FF and the program counter value is 
H'01_0000 to 01_FFFF. 
[0055] 

Thus, the select conditions for reading/writing in the 
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protect area PA of the flash memory 7 are such that the flash 
memory select signal is enabled only in the case where the 
program counter value and the address signal value coincide 
with the protect area PA of the flash memory 7. The flash 
memory select signal is disabled in cases other than the above 
case. 
[0056] 

In the RAM 4 , the select conditions for reading/writing 
in the protect area PAl of the RAM 4 are such that the RAM select 
signal is enabled only in the case where the program counter 
value indicates the protect area PA of the flash memory 7 and 
the address signal value indicates the protect area PAl of the 
RAM 4. The RAM select signal is disabled in cases other than 
the above case. 
[0057] 

The NOR circuit 12 finds a NOR sum of the signal output 
from the selector 10 and the read signal to output the NOR sum 
to the control unit of the driver 14. In the case where the 
address signal is the address H'01_0000 to H'OIFFFF 
indicating the protect area PA of the flash memory 7 , the 
program counter value is a value other than H • 01_0000 to 01_FFFF, 
and the active read signal ( '0* ) is input, the NOR circuit 12 
outputs a control signal so that the driver 14 outputs the 
initial value of the flash memory 7 h ' FFFF. In accordance with 
the above control, h ■ FFFF is output to the data signal of the 
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internal bus B. The value of the output signal is not limited 
to H'FFFF, and it is possible to arbitrarily set the output 
value. That is, any value may be output as long as the value 
is not the read out data from the flash memory 7 in accordance 
with the address signal output from CPU 2. 
[0058] 

The NOR circuit 13 finds a NOR sum of the signal output 
from the selector 11 and the read signal to output the NOR sum 
to the control unit of the driver 15. In the case where the 
address signal is the address H'FF_D000 to H ' FF_D7FF which 
indicates the protect area PAl of the RAM 4 , the program counter 
value is a value other than H ' 01_0000 to 01_FFFF, and the active 
read signal ( ' 0 ■ ) is input , the NOR circuit 13 outputs a control 
signal so that the driver 15 outputs the value corresponding 
to the NOP instruction from the RAM 4 . In accordance with the 
above control, H'0000 is output to the data signal of the 
internal bus B. The value of the output signal is not limited 
to H'0000, and it is possible to arbitrarily set the output 
value. That is, any value may be output as long as the value 
is not the read out data from the RAM 4 in accordance with the 
address signal output from CPU 2. 
[0059] 

In the case where the flash memory 7 or ' 0' ) is output 
and the flash memory select signal and the RAM select signal 
are disabled, access to the flash memory 7 and the RAM 4 is 
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prohibited to bring the data signal into a state of last value 

maintain. 

[0060] 

Fig. 5 is a block diagram showing an erasure prohibition 
control circuit (erasure prohibition control unit) 16 and a 
rewrite prohibition control circuit (rewrite prohibition 
control unit) 17 provided in the control circuit 7b controlling 
operation of the flash memory 7. 
[0061] 

The erasure prohibition control circuit 16 is a circuit 
for controlling erasure prohibition of the flash memory 7. In 
the case where a key code (first setting value) which is 
previously written in the key code area KA of the memory mat 
7a coincides with the key code (second setting value) which 
is previously set, the erasure prohibit control circuit 16 
prohibits erasure of a protect area PA of the memory mat 7a 
in the case where data erasure occurs in the protect area. 
[0062] 

The erasure prohibition control circuit 16 has a key code 
generation unit ( key code generation circuit ) 18, an exclusive 
NOR circuit (erasure control circuit) 19 , and an AND circuit 
20 (erasure control circuit). The key code generation unit 
18 has a circuit which outputs the previously set key code 
(second setting value such as H'1234, for example) by the use 
of hardware. 
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[0063] 

Connection is established in such a fashion that the key 
code (H'1234) generated by the key code generation unit 18 is 
input to one of input units of the exclusive NOR circuit 19 
and that the key code (first setting value) stored in the key 
code area KA is input to the other input unit of the exclusive 
NOR circuit 19. 
[0064] 

Connection is established in such a fashion that an erase 
block signal EB9 output from an erase block selector EBS is 
input to one of input units of the AND circuit 20. The erase 
block selector EBS is provided in the control circuit 7b and 
serves as one of registers for selecting a block to be erased. 
The erase bock selector EBS outputs the erase block signal EB9 
of '0' when erasing the protect area PA (Block 9) in the memory 
mat 7a of flash memory 7 . 
[0065] 

Connection is established in such a fashion that a signal 
output from the exclusive NOR circuit 19 is input to the other 
input unit of the AND circuit 20 . An input unit of a read/write 
control circuit 30 for controlling read/write in the flash 
memory 7 is connected to an output unit of the AND circuit 20 , 
and an erase block control signal EBC9 is output from the output 
unit of the AND circuit 20. 
[0066] 
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In the case where the key code (second setting value) 
generated by the key code generating unit 18 coincides with 
the key code (first setting value) stored in the key code area, 
the erasure prohibition control circuit 16 performs its 
control so as to disable the erase block control signal, and 
the read/write control circuit 30 prohibits erase operation. 
[0067] 

In the case where the erase block control signal EBC9 
is enabled, the read/write control circuit 3 0 performs erase 
control on the protect area PA (Block 9). 
[0068] 

In the case of setting plural protect areas in the memory 
cell unit of the flash memory 7 , the erasure prohibition control 
circuit 16 is provided in each of the protect areas to perform 
the erase control on the plural protect areas. 
[0069] 

The rewrite prohibition control circuit 17 has a key code 
generation unit (key code generation circuit) 21, an address 
judgment unit (address judgment circuit) 22, an exclusive NOR 
circuit (key code judgment unit) 23, inverters (rewrite 
control circuits) 24 to 26, a NOR circuit (rewrite control 
circuit) 21, a retention circuit (rewrite control circuit ) 28, 
and an AND circuit (rewrite control circuit) 29. 
[0070] 

The key code generation unit 21 has a circuit which 
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outputs a previously set key code (third setting value, for 
example, H'1234) by the use of hardware. Connection is 
established in such a fashion that the key code (H'1234) 
generated by the key code generation unit 18 is input to one 
of input units of the exclusive NOR circuit 23 and that the 
key code (first setting value) stored in the key code area KA 
is input to the other input unit of the exclusive NOR circuit 
23. 

[0071] 

An address signal is input to the address judgment unit 
22 , and the address judgment unit 22 output 1 0 ' when the address 
signal is the address H'01_0000 to H'01_FFFF and outputs 1 1' 
when the address signal is other than the address H'01_0000 
to H 1 01_FFFF . 
[0072] 

Connection is established in such a fashion that the 
memory select signal (Fig. 1) , the write signal (Fig. 1), and 
a judgment signal output from the address judgment unit 22 are 
input to input units of the inverter 24 to 26. 
[0073] 

An output unit of the exclusive NOR circuit 23 and output 
units of the inverter 24 to 26 are connected to an input unit 
of the NOR circuit 27 , and an input unit of the retention circuit 
28 is connected to an output unit of the NOR circuit 27. The 
retention circuit 28 is a circuit which retains a state of a 
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signal until writing in the flash memory 7 occurs. 
[0074] 

Connection is established in such a fashion that a 
program mode signal P output from a programming bit PB is input 
to one of input units of the AND circuit 29. The programming 
bit PB is a bit used for releasing/transitioning a program mode 
for starting rewriting. The program mode is released when the 
programming bit PB is • 0 1 , while the transition to the program 
mode is performed when the programming bit PB is ' 1 ' . 
[0075] 

An input unit of a read/write control circuit 30 is 
connected to an output unit of the AND circuit 29 , and a program 
mode signal P is output from the output unit of the AND circuit 
29. 

[0076] 

In the case where the key code (third setting value) 
generated by the key code generation unit 21 coincides with 
the key code (first setting value) stored in the key code area, 
the read/write control circuit 30 prohibits rewrite operation. 
[0077] 

In the case where the program mode signal P is enabled , 
the read/write control circuit 30 performs rewrite control on 
the protect area PA (Block 9). 
[0078] 

Though the key code is set to H 1 1234 in this specification, 
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the key code may be any data other than the initial value 

(H'FFFF) stored in the flash memory 7. 

[0079] 

Hereinafter , operation of the semiconductor integrated 
circuit apparatus 1 according to this invention will be 
described. 
[0080] 

The instruction shown in Figs. 6 to 9 as the instruction 
to be executed by the CPU 2 is not more than one specific example. 
The instruction is not limited to the above one, and various 
instructions can be executed. Instruction stored in a memory 
corresponding to an address and a data value (for example, 
"H'6828" is stored in the address H'00_4008 in Fig. 6) vary 
from program to program. In this invention, accesses to the 
various memories and peripheral circuits are controlled 
through a comparison between the address value and the program 
counter value performed by the bus state controller 3 . 
[0081] 

To start with, readout control operation in the user 
access area UA of the flash memory 7 will be described using 
Fig. 6. 
[0082] 

An illustration of the readout control by the flash 
memory 7 is shown in an upper part of Fig. 6, and a timing chart 
of the signals of relevant units is shown in a lower part of 
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Fig. 6. 
[0083] 

In the timing chart of Fig. 6, a clock signal <|>, a program 
counter value output from the CPU 2, an address signal output 
from the CPU 2, a flash memory select signal output from the 
bus state controller 3, a data signal output from the CPU 2, 
and a state signal (PC = H'01_xxxx) indicating whether the 
program counter value indicates the protect area PA of the flash 
memory 7 are shown in this order from the top to the bottom. 
[0084] 

The program counter of the CPU 2 indicates and address 
H'00_4000 to output the address H , 00_4000 to the internal bus 
so that CPU 2 reads out an instruction in the address H 1 00_4000 
from the memory sequentially. Then, the CPU 2 stores H'0000 
in a general purpose register (E2). 
[0085] 

After that, the CPU 2 reads out an instruction of an 
address H' 00_4004 and then an address H' 00_4006 to store H' 0C00 
in a general purpose register (R2). 
[0086] 

Then, the CPU 2 reads out an instruction of an address 
H'00_4008 to analyze the instruction (to read data stored in 
a memory indicated by the address value of the general purpose 
register ER2 ) . After that, the CPU 2 executes the instruction 
and reads out data of an address H'OO 0C00 to store H'1234 in 
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a general purpose register (ROL). 
[0087] 

In this case, the protect area PA in the flash memory 
7 is not read out, i.e., the address value does not indicate 
the protect area PA, so that programs /data are read out without 
limitation. 
[0088] 

Hereinafter, control operation for reading out the 
protect area PA from the user access area UA of the flash memory 
7 will be described with reference to Fig. 7. 
[0089] 

An illustration of the readout control by the flash 
memory 7 is shown in an upper part of Fig. 7, and a timing chart 
of the signals of relevant units is shown in a lower part of 
Fig. 7 . In the timing chart, a clock signal <j>, a program counter 
value output from the CPU 2, a address signal output from the 
CPU 2, a flash memory select signal output from the bus state 
controller 3, data, and a state signal (PC = H , 01_xxxx?) 
indicating whether the program counter value indicates the 
protect area PA of the flash memory 7 are shown in this order 
from the top to the bottom. 
[0090] 

The program counter of the CPU 2 indicates an address 
H'00_400A and outputs the address H'00_400A to the internal 
bus. Instructions of the address H'OO 400A are read out 
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sequentially from the memory to store H'OOOl in the general 
purpose register (E2). Then, the CPU 2 reads out an address 
H , 00_400E and an address H'00_4010 sequentially to store 
H'0000 in the general purpose resister (R2). Then, the CPU2 
reads out the instruction of the address H' 00-4012 to perform 
analysis (to read data stored in the memory indicated by the 
address value indicated by the general purpose register ER2 ) 
and then reads out data of the address H'OIOOOO. 
[0091] 

In this case, the address H ■ 01_0000 is inside the protect 
area PA of the flash memory 7, and the program counter value 
output from the CPU 2 is outside the protect area PA ( H 1 00 40 14 
in this case), so. that the flash memory select signal output 
from the bus state controller 3 is inactive ( ' 1 ■ ) to cause the 
data of H ■ FFFF to be output to the address signal of the internal 
bus B under the control of the bus state controller 3 . 
[0092] 

With the above-described constitution, it is possible 
to prohibit data read access to the protect area PA from the 
user area UA. 
[0093] 

Hereinafter, control operation for reading out the 
protect area PA from the protect area PA of the flash memory 
7 will be described using Fig. 8. 
[0094] 
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An illustration of the readout control by the flash 
memory 7 is shown in an upper part of Fig. 8, and a timing chart 
of the signals of relevant units is shown in a lower part of 
Fig . 8 . In the timing chart , a clock signal <j>, a program counter 
value output from the CPU 2, an address signal output from the 
CPU 2, a flash memory select signal output from the bus state 
controller 3, data, and a state signal (PC = H'Olxxxx?) 
indicating whether the program counter value indicates the 
protect area PA of the flash memory 7 are shown in this order 
from the top to the bottom. 
[0095] 

The CPU 2 reads out instructions stored in an address 
H'Ol^OOOO and an address H , 01_0002 sequentially to store 
H'OOOl in the general purpose register (E2). After that, the 
CPU 2 reads out instructions of the address H , 01_0004 and the 
address H'Ol^OOOe to store H'0100 in the general purpose 
register (R2 ) . 
[0096] 

Then, the CPU 2 reads out an instruction of an address 
H' 01_0008 to perform analysis (to read data stored in the memory 
indicated by the address indicated by the general purpose 
register ER2) and then executes the instruction based on the 
analysis to read out data to be stored in the address H 1 01_0100, 
whereby the CPU 2 stores H 1 1234 in the general purpose register 
(ROL) . 
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[0097] 

In this case, since the protect area PA is read out from 
the protect area PA, the program counter value is in the protect 
area PA, and the flash memory select signal is continuously 
active ( 1 0 1 ) , so that normal data read out from the flash memory 
7 are output to the data signal (Data) of the internal bus B. 
[0098] 

Hereinafter, control operation for reading out data of 
the protect area PA1 of the RAM 4 from the protect area PA of 
the flash memory 7 will be described using Fig. 9. 
[0099] 

Illustrations for read out controls by the flash memory 
7 and the RAM 4 are shown in an upper part of Fig. 9, and timing 
charts of signals are shown in a lower part of Fig. 9. In the 

timing chart, a clock signal <|>, a program counter value output 
from the CPU 2, an address signal output from the CPU 2, a RAM 
memory select signal output from the bus sate controller 3, 
data, and a state signal (PC = H'Ol^xxxx?) indicating whether 
the program counter value indicates the protect area PA of the 
flash memory 7 are shown in this order from the top to the 
bottom . 
[0100] 

The CPU 2 reads out instructions of an address H , 01_5000 
and an address H , 01_5002 sequentially to store H'FFFF in the 
general purpose register (E2). After that, the CPU 2 reads 
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out instructions of an address H , 01_5004 and an address 
H'01_5006 sequentially to store H'DOOO in the general purpose 
register (R2). 
[0101] 

After that, CPU 2 reads out an instruction of an address 
H 1 01 5008 to perform analysis of the instruction (to read data 
stored in the memory indicated by the address indicated by the 
general purpose register ER2 ) , and the CPU 2 reads out data 
of an address H 1 FF_D00O in the RAM 4 to store the read out H 1 1234 
in the general purpose register (R0L). 
[0102] 

In this case, since the program counter value 
(H'01_50xx) is in the protect area PAl , the RAM select signal 
output from the bus state controller 3 becomes active ( 1 0 ' ) 
to bring normal data to be read out from the RAM 4 . 
[0103] 

One example of processing by the RAM 4 used as the work 
area will be described by using Fig. 10. 
[0104] 

Referring to Fig. 10 , a process of compressing text data 
will be described. A left part of Fig. 10 is an illustration 
of the RAM 4 and the flash memory 7, and a right part is a 
flowchart of the processing. 
[0105] 

The text data are unfolded on the RAM 4 (Step SI 01) , and 
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then a subroutine jump to the protect area PAl of the RAM 4 
(Step S102) is performed. After that, during the compression 
processing based on the program stored in the protect area PA, 
intermediate data in the compression processing and a 
compression processing result are stored in the protect area 
PA 1 (step S103 ) . 
[0106] 

Then, in an encryption processing based on a program 
stored in the protect area PA, intermediate data for the 
encryption processing and an encryption result are stored in 
the protect area PAl (Step S104 ) and the encryption result data 
are stored in the user access area UAl (Step S105). 
[0107] 

After that, by means of return subroutine (Step S106), 
the encryption result data are stored in an external memory, 
for example, which is externally connected to the 
semiconductor integrated circuit apparatus 1 (Step S107). 
[0108] 

By performing the program processing of compression and 
encryption in the protect area PAl of the RAM 4 as described 
above, it is possible to make it difficult to guess what 
processing is performed by the program. 
[0109] 

Hereinafter, operations of the erasure prohibition 
control circuit 16 and the rewrite prohibition control circuit 
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17 provided in the control circuit 7b shown in Fig. 5 will be 

described. 

[0110] 

When a block (Block 9) is specified in erase operation 
of the flash memory 7 , an erase block signal EB9 of 1 0 1 is output 
from the erase block selector EBS. 
[0111] 

In this case, the erasure prohibition control circuit 
16 reads out a key code (first setting value) stored in a key 
code area KA and finds an exclusive NOR sum of the key code 
and a key code (second setting value) generated by the key code 
generation unit 18 by the use of the exclusive NOR circuit 19. 
In the case where the readout key code and the key code generated 
by the key code generation unit 18 coincides with each other , 
an erase block control signal EBC of ' 0' is input to the 
read/write control circuit 30. The erase operation in the 
flash memory 7 is prohibited by the erase block control signal 
EBC9. 
[0112] 

In the rewrite operation of the flash memory 7 , a program 
mode signal P of ■ 1' is output from the programming bit PB, 
and then an address specifying designation of the rewrite is 
input . 
[0113] 

The address judgment unit 22 judges whether the input 
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address signal is in the protect area PA or not. A key code 
(third setting value) generated by the key code generation unit 

21 is compared with the key code (first setting value) stored 
in the key code area KA in the exclusive NOR circuit 19 , and 
a signal of 1 0' is output in the case where the key codes 
coincides with each other. 

[0114] 

Further, since the flash memory 7 is to be rewritten, 
an active ( ' 0 ' ) flash memory select signal and an active write 
signal is output from the bus state controller 3. 
[0115] 

In the case where the input address is in the protect 
area PA, a signal 1 0 1 is output from the address judgment unit 

22 to be input to the other input unit of the AND circuit 29 
via the retention circuit 28. 

[0116] 

Since the program mode signal P of '1' is output from 
the programming bit PB, a program mode signal P of 1 0 1 is output 
to the read/write control circuit 30 from the AND circuit 29. 
Thus, rewrite operation in the flash memory 7 is prohibited. 
[0117] 

Since a signal of ' 1 ' is output from the address judgment 
unit 22 in the case where the input address is outside the 
protect area PA, the program mode signal P output from the AND 
circuit 29 becomes '1' to rewrite the flash memory 7. 
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[0118] 

Hereinafter, a processing to be performed in the case 
where a first user (soft IP vender, for example) dispatches 
a semiconductor integrated circuit apparatus 1 to an end user 
after writing a program and setting a key code in the 
semiconductor integrated circuit apparatus 1 will be described 
using a flowchart of Fig. 11. 
[0119] 

The first user starts debugging of a key program ( first 
program) created by the first user (Step S201). Write and 
erasure of the key program (Step S202) are performed until 
completion of the debugging (Step S203 ) . After the completion 
of debugging, a key code (first setting value) is written in 
a key code area KA (Step S204), and a program for debugging 
(third program) stored in the user access area UA and the like 
are erased for the dispatch to the end user (Step S205). 
[0120] 

After that, the end user starts debugging of a main 
program (second program) created by the end user (Step S301) . 
Write and erasure of the main program generated by the debugging 
are performed until completion of the debugging (Steps S3 02 
and S303 ) . 
[0121] 

Since the key code is set by the first user in processing 
of these steps S302 and S3 03, it is impossible for the end user 
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to perform write/erase of the program (first program) written 
by the first user and stored in the protect area PA. 
[0122] 

Hereinafter, a processing to be performed when the end 
user sets a key code will be described using Fig. 12. 
[0123] 

The end user starts debugging a key program (first 
program) to be stored in the protect area PA and a main program 
(second program) to be stored in the user area (Step S401). 
Then, writing and erasure of the key program (first program) 
and the main program (second program) generated by the 
debugging are performed (Step S402). 
[0124] 

After completion of the debugging (Step S4 03 ) , a key code 
(a first setting value) is written in the key code area to 
protect the key program written in the protect area PA (Step 
S404) . 
[0125] 

According to the first embodiment, since it is possible 
to protect the key program, reading and copying or alteration 
of the key program by a third party are prevented. 
[0126] 

(Second Embodiment) 

Fig. 13 is a block diagram showing a semiconductor 
integrated circuit apparatus according to a second embodiment 
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of this invention; Fig. 14 is a diagram for illustrating a reset 
sequence in the semiconductor integrated circuit apparatus of 
Fig. 13; Fig. 15 is a flow chart showing a setting processing 
in a protect processing control unit in the reset sequence of 
Fig. 14; Fig. 16 is a flowchart showing a arbitrary setting 
processing in a protect area in a flash memory 7 provided in 
the semiconductor integrated circuit apparatus of Fig. 13; and 
Fig. 17 is a diagram for supplementary illustrating a memory 
map of the flash memory 7 in Fig. 16. 
[0127] 

In the second embodiment, a semiconductor integrated 
circuit apparatus 1 is provided with a CPU 2, a bus state 
controller 3, a RAM 4, peripheral circuits 6 including an SCI 
(Serial Communication Interface) 5, etc., a nonvolatile 
semiconductor memory such as a flash memory 7 , and the like 
as shown in Fig. 13, and the constitution is the same as that 
of the first embodiment 1 . 
[0128] 

Though the protect area PA of the flash memory 7 is fixed 
to one block containing addresses H'01_0000 to H , 01_FFFF / it 
is possible to arbitrarily change the protect area PA of the 
flash memory 7 in the second embodiment. 
[0129] 

The flash memory 7 has a memory mat 7a and a control 
circuit 7b. The memory mat 7a has memory cells, each of which 
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is a smallest unit for storage, aligned in an array form and 
includes peripheral circuit such as an address buffer, an 
address decoder 7al, an input output buffer 7a2, and a sensing 
amplifier. 
[0130] 

The control circuit 7b temporarily stores various 
control signals input from the CPU 2 to control operation logic. 
The control circuit 7b is provided with a protect processing 
control unit 31. 
[0131] 

The protect processing control unit 31 performs control 
on arbitrarily changing an area of the protect area PA in the 
flash memory 7. The protect area PA is provided with a start 
address storage area SDA for storing a start address of the 
protect area PA, an end address storage area MDA for storing 
an end address of the protect area PA, and a key code area KA 
for storing a key code area. 
[0132] 

The protect processing control unit 31 has a protect 
processing control circuit 32, an address generation circuit 
33, a read signal generation circuit 34, an address/key code 
storage register 35, and selectors 36 and 37. 
[0133] 

Connection is established in such a fashion that a reset 
signal output from a reset circuit 38 for generating a reset 
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signal is input to the protect processing control circuit 32, 
the address generation circuit 33 , the read signal generation 
circuit 34, and the address/key code storage register 35. 
[0134] 

The address generation circuit 33, the read signal 
generation circuit 34, and the address/key code storage 
register 35 are connected to the protect processing control 
circuit 32, and a signal output from the protect processing 
control circuit 32 causes the circuits to start operation. 
[0135] 

The address generation circuit 33 generates a storage 
address for storing a key code stored in the memory mat 7a of 
the flash memory 7. The read signal generation circuit 34 
generates a read signal of the memory mat 7a. The address/key 
code storage register 35 stores the key code read out from the 
memory mat 7a and an address indicating an area of the protect 
area PA. 
[0136] 

Connection is established in such a fashion that control 
signals for controlling the selectors 36 and 37 are input to 
the protect processing control circuit 32. The selector 36 
switches between the address generated by the address 
generation circuit 33 and the address output from the bus state 
controller 3 based on the control signal output from the protect 
processing control circuit 32 to output one of the addresses. 
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[0137] 

The selector 37 switches between the read signal 
generated by the read signal generation circuit 34 and the road 
signal output from the bus state controller 3 based on the 
control signal output from the protect processing control 
circuit 32 to output. 
[0138] 

Fig. 14 is a diagram for illustrating a reset sequence 
in the semiconductor integrated circuit apparatus 1; Fig. 15 
is a flow chart showing a setting processing in the protect 
processing control unit 31 in the reset sequence in Fig. 14. 
[0139] 

In Fig. 14 , a system clock, a reset signal input to a 
reset terminal of a semiconductor integrated circuit apparatus 
1, a operation state of the protect processing control unit 
31 , an internal reset signal of the semiconductor integrated 
circuit apparatus 1, and an operation state of the CPU 
(semiconductor integrated circuit apparatus 1) 2 are shown in 
this order from the top to the bottom. 
[0140] 

To start with, a reset signal is input from the reset 
terminal which is one of external ports of the semiconductor 
integrated circuit apparatus, and, when the reset signal is 
released (Step S501), the protect processing control circuit 
32 is activated (Step S502). 
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[0141] 

The protect processing control circuit 32 outputs a 
signal to the address generation circuit 33 and the read signal 
generation circuit 34 to cause the address generation circuit 
33 and the read signal generation circuit 34 to operate (Step 
S503) . 
[0142] 

The protect processing control circuit 32 then reads out 
data stored in the key code area KA of the memory mat 7a (Step 
S504 ) to store the data in the address/key code storage register 
35 (Step S505) . 
[0143] 

The protect processing control circuit 32 judges whether 
or not a key code (first setting value) is stored in the 
address/key code storage register 35 (Step S506), and, when 
the key code is stored, the protect processing control circuit 
32 reads out a start address and an end address of the protect 
area PA from the memory mat 7a to store the addresses in the 
address/key code storage register 35 (Steps S507 and S508). 
[0144] 

After completion of the processing of Step S508 or when 
there is no key code in the processing of Step S506, a release 
signal for releasing the internal reset of the semiconductor 
integrated circuit apparatus is output (Step S509), and then 
the protect processing control circuit 32 is stopped (Step 
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S510) to cause the semiconductor integrated circuit apparatus 

1 to start operation. 

[0145] 

The key code reading, the key code setting for the control 
circuit 7b, and the check for protect on the protect area are 
executed in accordance with the above-described flow after the 
release of reset. After the semiconductor integrated circuit 
apparatus 1 starts normal operation , a control based on a memory 
access address in accordance with Fig. 4 is executed. 
[0146] 

In the case where each of the protect area PA and the 
protect area PA1 is a fixed area, steps S507 and S508 are not 
executed. 
[0147] 

Fig. 16 is a flowchart indicating an arbitrary setting 
processing of the protect area PA in the flash memory 7, and 
Fig. 17 is a diagram for supplementary illustrating a memory 
map of the flash memory 7 in Fig. 16. 
[0148] 

To start with, debugging of a program is started (Step 
S601), and program writing and erasure (Step S602) are 
performed until completion of the debugging (Step S603). 
After the completion of debugging, an arbitrary start address 
of the protect area PA is written in the start address storage 
area SDA provided in the memory mat 7a, and an arbitrary end 
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address of the protect area PA is written in the end address 
storage area MDA, so that an arbitrary area of the protect area 
PA is set and a key code is written in the key code area KA 
(Step 604) . 
[0149] 

In this case, by setting the start address and the end 
address in the start address storage area SDA and the end 
address storage area MDA in such a fashion that the key code 
area KA is in the protect area PA, it is possible to prevent 
alteration and readout of the protect area or readout or 
alteration of the key code by a third party. 
[0150] 

According to the second embodiment, since the area of 
the protect area PA is arbitrarily changed, it is possible to 
perform flexible changes in accordance with a data capacity 
of a program of which reading/writing is to be prohibited, and 
it is possible to prevent a third party from reading out, 
copying or altering the program. 
[0151] 

Though the invention achieved by the present inventor 
has been described based on the embodiments in the foregoing, 
this invention is not limited to the foregoing embodiments, 
and various modifications are possible insofar as the 
modifications do not depart from the scope of this invention. 
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Industrial Applicability 
[0152] 

The semiconductor integrated circuit apparatus of this 
invention is applicable to technologies for prevention of 
reading and rewriting of a predetermined block in a nonvolatile 
semiconductor memory. 
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